System, method, and computer program product for conditionally securing data stored on a peripheral device coupled to a system, based on a state of the system
View Patent ↗A system, method, and computer program product are provided for conditionally securing data stored on a peripheral device coupled to a system, based on a state of the system. In use, a state of a system is identified. In addition, data stored on a peripheral device coupled to the system is conditionally secured, based on the state.
1. A host-based data security method, comprising:
determining, by a system status monitor, a state of a host computer system, wherein at least some of the system status monitor is stored in and executing from kernel memory in the host computer system;
notifying, by the system status monitor, a file system monitor of the host computer system's state, wherein at least some of the file system monitor is stored in and executing from non-kernel memory in the host computer system;
determining, by the file system monitor, a peripheral device is communicatively coupled to the host computer system; and
conditionally securing data on the peripheral device based on the determined state of the host computer system.
2. The method of claim 1 , wherein the act of determining a peripheral device is communicatively coupled to the host computer system, further comprises determining, by the file system monitor, that the peripheral device is capable of storing information.
3. The method of claim 1 , wherein the act of conditionally securing data on the peripheral device comprises:
encrypting the data, by a security module, wherein at least some of the security module is stored in and executing from the non-kernel memory in the host computer system; and
storing the encrypted data on the peripheral device if the state of the host computer system is locked.
4. The method of claim 3 , further comprises disabling at least a portion of the peripheral device.
5. The method of claim 3 , further comprising:
detecting, by the file system monitor, that the peripheral device is no longer communicatively coupled to the host computer system; and
causing, by the file system monitor, an alarm to be issued.
6. The method of claim 5 , further comprising:
determining, by the system status monitor, that the state of the host computer system has changed to unlocked; and
cancelling the alarm.
7. The method of claim 5 , further comprising:
determining after the act of issuing the alarm, by the file system monitor, that the peripheral device is re-communicatively coupled to the host computer system; and
cancelling the alarm.
8. The method of claim 1 , wherein the act of conditionally securing data on the peripheral device based on the host computer system's state comprises:
retrieving data from a memory external to the peripheral device;
decrypting the retrieved data, by a security module, wherein at least some of the security module is stored in and executing from the non-kernel memory in the host computer system; and
storing the decrypted retrieved data on the peripheral device if the state of the host computer system is unlocked.
9. The method of claim 1 , wherein the act of conditionally securing data on the peripheral device comprises:
retrieving information from the peripheral device;
encrypting the information, by a security module, to generate data, wherein at least some of the security module is stored in and executing from non-kernel memory in the host computer system; and
storing the data on the peripheral device if the state of the host computer system is locked.
10. The method of claim 9 , further comprising deleting the information from the peripheral device.
11. The method of claim 1 , wherein the act of conditionally securing data on the peripheral device comprises:
retrieving data from a memory external to the peripheral device wherein the data is encrypted; and
storing the data on the peripheral device if the state of the host computer system is locked.
12. The method of claim 1 , wherein the act of determining a state of a host computer system comprises determining, by the system status monitor, the host computer system has transitioned from an unlocked state to a locked state.
13. The method of claim 12 , wherein the act of conditionally securing data on the peripheral device based on the host computer system's state comprises:
retrieving data from a memory other than a memory in the peripheral device;
encrypting, by a security module, the retrieved data, wherein at least some of the security module is stored in and executing from the non-kernel memory in the host computer system; and
storing the encrypted stored data on the peripheral device based on the state of the host computer system changing from an unlocked state to a locked state.
14. A program storage device having computer executable instructions tangibly stored thereon, the computer executable instructions for causing a computer to perform the method of claim 1 .